Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3137372e3233342e3139322e302f31382d3234203d3e20323634363638.roa
File:                     3137372e3233342e3139322e302f31382d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          Wcjsb7l/gBEKUQPVViWKOc6QmeneZxj1RS6nPd25tAA=
Subject key identifier:   D7:41:C2:59:57:1D:A5:F1:09:78:66:8C:06:1A:AF:CD:D8:C1:4B:51
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       1D8B5CC69D224B5C4DB1733F187C3C2FFB709519
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3137372e3233342e3139322e302f31382d3234203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:54:39 +0000
ROA not before:           Tue 04 Feb 2025 18:49:39 +0000
ROA not after:            Tue 03 Feb 2026 18:54:39 +0000
asID:                     264668
IP address blocks:        177.234.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8b:5c:c6:9d:22:4b:5c:4d:b1:73:3f:18:7c:3c:2f:fb:70:95:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Feb  4 18:49:39 2025 GMT
            Not After : Feb  3 18:54:39 2026 GMT
        Subject: CN=D741C259571DA5F10978668C061AAFCDD8C14B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:e7:ae:b5:28:bb:2a:99:19:5a:e0:db:87:
                    2d:8f:b9:c3:a2:7a:09:72:d9:ed:29:30:25:48:ff:
                    aa:dc:24:9d:a8:ed:64:f8:16:f8:1d:34:7c:53:38:
                    dd:b5:e9:d1:c3:a8:f1:8d:43:14:c0:45:19:42:45:
                    9f:2c:60:dd:3b:d3:b9:af:8a:96:59:a5:7a:5b:23:
                    96:93:b0:f6:59:1e:72:6d:da:c3:4f:b5:1c:50:c1:
                    d2:de:b8:ca:57:68:38:c0:1d:73:d4:01:22:2b:22:
                    49:6d:1a:69:48:05:ff:25:72:4d:60:18:b2:c8:32:
                    a9:4b:9e:e1:d5:1e:53:b8:f6:63:79:68:1d:1a:84:
                    c2:03:20:5c:46:20:ef:1c:8b:49:fc:75:98:4d:89:
                    c8:3a:c1:f8:b1:6a:08:b2:b1:4c:7f:27:75:9b:5b:
                    2c:2a:d8:1c:06:4f:30:6c:0a:e5:f8:c8:3c:2f:33:
                    87:0d:d0:c8:28:cc:b1:bf:ff:a6:4f:98:9d:4a:1b:
                    5c:3b:50:8b:be:87:60:91:9e:39:95:e5:d2:9c:7f:
                    e7:53:14:b2:bd:8f:e3:49:26:50:ae:32:13:18:d0:
                    f0:7b:59:a4:40:5c:3f:ca:27:80:b1:1d:99:d8:7f:
                    24:92:81:93:69:ea:a0:9a:46:4d:b5:f8:a1:c1:18:
                    5f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:41:C2:59:57:1D:A5:F1:09:78:66:8C:06:1A:AF:CD:D8:C1:4B:51
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3137372e3233342e3139322e302f31382d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:d5:91:98:38:e5:ce:f9:d2:12:ca:95:de:ff:ce:f2:a9:b0:
         50:4c:17:d3:3c:c3:b9:34:96:5f:61:0d:30:c7:2e:0a:af:95:
         da:a9:bf:b8:2a:d8:0e:ad:f6:00:b7:e8:87:c2:a0:d7:df:37:
         f4:61:fd:a0:26:2b:62:2a:0e:c7:b6:b2:9c:c5:62:d2:fd:67:
         13:80:a8:4b:d9:2c:9f:d9:ed:58:8b:9b:50:b2:c5:89:e4:48:
         bf:be:83:50:44:f7:48:fb:15:71:2c:04:e0:bb:7d:6c:83:01:
         46:8d:0a:be:9f:35:c2:b3:c1:d4:ec:b5:0c:32:6c:1b:41:5e:
         58:cf:04:c9:25:f4:ea:19:20:d2:de:56:6c:c6:40:ad:cc:53:
         c7:1f:b7:df:56:cf:00:65:9d:03:b4:19:d5:d4:e5:c1:a0:fe:
         13:0a:f9:dd:78:ca:c4:cb:9d:a3:df:38:f6:74:bb:fb:85:4f:
         d5:cf:07:5e:67:62:3b:b2:0d:af:2b:99:fb:a3:3e:a5:ed:1d:
         6a:3d:cb:0c:c8:01:1d:66:2f:6b:38:ba:3e:99:62:fc:35:1d:
         5f:94:c9:90:a5:96:c5:45:c5:0d:6a:e5:06:29:df:05:83:68:
         ef:bb:77:91:5d:4b:ee:08:cd:d7:25:8a:3b:28:32:9c:37:0c:
         d4:b0:26:4c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUHYtcxp0iS1xNsXM/GHw8L/twlRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI1NTBBNUQzMDlFRTIxMjhFNEZDREMwMkNENEFDNUM1
NzYwNjlFMjAeFw0yNTAyMDQxODQ5MzlaFw0yNjAyMDMxODU0MzlaMDMxMTAvBgNV
BAMTKEQ3NDFDMjU5NTcxREE1RjEwOTc4NjY4QzA2MUFBRkNERDhDMTRCNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGeOeutSi7KpkZWuDbhy2PucOi
egly2e0pMCVI/6rcJJ2o7WT4FvgdNHxTON216dHDqPGNQxTARRlCRZ8sYN0707mv
ipZZpXpbI5aTsPZZHnJt2sNPtRxQwdLeuMpXaDjAHXPUASIrIkltGmlIBf8lck1g
GLLIMqlLnuHVHlO49mN5aB0ahMIDIFxGIO8ci0n8dZhNicg6wfixagiysUx/J3Wb
Wywq2BwGTzBsCuX4yDwvM4cN0MgozLG//6ZPmJ1KG1w7UIu+h2CRnjmV5dKcf+dT
FLK9j+NJJlCuMhMY0PB7WaRAXD/KJ4CxHZnYfySSgZNp6qCaRk21+KHBGF9/AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU10HCWVcdpfEJeGaMBhqvzdjBS1EwHwYDVR0j
BBgwFoAUwlUKXTCe4hKOT83ALNSsXFdgaeIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEI3NDY4MjhBNzM4MDNFRTBBQzJDQ0NGOUQ1ODhDMzg0
QTg2N0U0QTczNUJBNDcxQUU5NjIwMDk4NDMxRjYzLzAvQzI1NTBBNUQzMDlFRTIx
MjhFNEZDREMwMkNENEFDNUM1NzYwNjlFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjU1MEE1RDMwOUVFMjEyOEU0
RkNEQzAyQ0Q0QUM1QzU3NjA2OUUyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBCNzQ2ODI4QTczODAzRUUwQUMyQ0NDRjlENTg4QzM4NEE4NjdFNEE3
MzVCQTQ3MUFFOTYyMDA5ODQzMUY2My8wLzMxMzczNzJlMzIzMzM0MmUzMTM5MzIy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM2Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAax
6sAwDQYJKoZIhvcNAQELBQADggEBAIzVkZg45c750hLKld7/zvKpsFBMF9M8w7k0
ll9hDTDHLgqvldqpv7gq2A6t9gC36IfCoNffN/Rh/aAmK2IqDse2spzFYtL9ZxOA
qEvZLJ/Z7ViLm1CyxYnkSL++g1BE90j7FXEsBOC7fWyDAUaNCr6fNcKzwdTstQwy
bBtBXljPBMkl9OoZINLeVmzGQK3MU8cft99WzwBlnQO0GdXU5cGg/hMK+d14ysTL
naPfOPZ0u/uFT9XPB15nYjuyDa8rmfujPqXtHWo9ywzIAR1mL2s4uj6ZYvw1HV+U
yZCllsVFxQ1q5QYp3wWDaO+7d5FdS+4IzdclijsoMpw3DNSwJkw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:37 2025 by rpki-client